Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v1.15 Backports 2024-05-11 #32481

Merged
merged 4 commits into from
May 12, 2024
Merged

v1.15 Backports 2024-05-11 #32481

merged 4 commits into from
May 12, 2024

Commits on May 11, 2024

  1. proxy: Re-enable proxy rule installation in native mode 

    [ upstream commit 32b2784 ]

This commit is to re-enable proxy rule installation in native mode if
cilium envoy config or ipsec is enabled. The reason is to handle the
reply packet of hair-pinning traffic in Ingress L7 proxy (i.e. backend
is in the same node).

Relates: 0ebe516
Relates: #29530, #29864

Signed-off-by: Tam Mach <[email protected]>
    @sayboras
    sayboras committed May 11, 2024
    Configuration menu
    Copy the full SHA
    3687776 View commit details
    Browse the repository at this point in the history

  2. ci-gke: Add test for hair-pinning Ingress case 

    [ upstream commit 4ce4bb1 ]

This is to make sure that we have a coverage for hair pinning traffic
i.e. backend is on the same node with client. Additionally, this test
will provide some coverage with cloud provider (e.g. GKE), as all other
Ingress/Gateway API/L7 LB tests are running with kind clusters.

Signed-off-by: Tam Mach <[email protected]>
    @sayboras
    sayboras committed May 11, 2024
    Configuration menu
    Copy the full SHA
    411331e View commit details
    Browse the repository at this point in the history

  3. clustermesh: Enable legacy host routing for Ingress 

    [ upstream commit de9c87b ]

After #22006, BPF host routing is enabled by default, this commit is to
enable legacy host routing as a workaround, as the response packet might
be dropped. Further investigation is tracked under #31653.

Signed-off-by: Tam Mach <[email protected]>
    @sayboras
    sayboras committed May 11, 2024
    Configuration menu
    Copy the full SHA
    75e18db View commit details
    Browse the repository at this point in the history

  4. cilium-cli: Bump cilium-cli version to v0.16.7 

    [ upstream commit bc41564 ]

This is to pick up the changes for Ingress controller connectivity tests

Signed-off-by: Tam Mach <[email protected]>
    @sayboras
    sayboras committed May 11, 2024
    Configuration menu
    Copy the full SHA
    6ad1b33 View commit details
    Browse the repository at this point in the history